This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft File: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json) Hash identifier: XTYHys4Wl2NMl72D0Vz/l7mFVZSVYw87fynZ8pPlTWI= Subject key identifier: 00:7D:AE:28:EF:E0:70:51:29:FB:AC:28:99:2B:89:A3:D1:1A:E9:FA Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Certificate serial: 05D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft Manifest number: 05BE Signing time: Mon 22 Dec 2025 22:17:29 +0000 Manifest this update: Mon 22 Dec 2025 22:17:28 +0000 Manifest next update: Mon 29 Dec 2025 22:17:28 +0000 Files and hashes: 1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: mj0al05qbjc5Xd+ck2OR5m/i28fe/fDyilU8V7MGFu4=) 2: 316ABBEA854611F0AF075D70C4F9AE02.roa (hash: VYKklQ7sC0GnSlFJLoi6ilrtCn1QqOw+2GAk4IP7i50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Validity Not Before: Dec 22 22:17:28 2025 GMT Not After : Dec 29 22:17:28 2025 GMT Subject: CN=6949c379-e5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7c:4d:6a:24:57:25:ac:50:89:81:32:9b:f2: b9:bf:34:1e:a7:4a:f2:f0:33:3e:df:7c:f4:46:0e: 26:62:7a:5e:56:a8:5e:a4:79:37:17:08:0c:72:cf: 9c:e1:9e:44:f2:a5:47:bf:7a:88:47:67:af:b5:b1: 9f:27:ea:d8:72:a4:cf:8c:10:58:7b:e2:f4:26:99: 3b:28:cc:04:89:cf:36:41:b5:a5:61:e0:d3:9e:17: b4:d4:31:37:ff:bd:58:a2:2a:c7:20:f4:f1:b4:82: d0:05:29:b5:1e:2e:cd:08:77:f3:a3:f1:8c:79:7e: 3c:98:68:b1:b6:19:3d:db:fd:95:f6:03:a4:71:d1: 9f:e1:17:23:5b:7d:8f:42:65:19:a9:06:0f:0e:47: ea:50:df:75:0f:80:9c:a5:70:b6:74:de:fb:dc:02: d8:90:7c:a5:ca:fb:f3:45:62:7c:24:02:ee:43:23: f4:9f:da:38:d5:b3:df:63:b1:e6:fe:4e:2f:d3:89: f0:c5:17:13:5f:9f:9e:97:52:9c:d1:07:75:32:66: 90:d0:2a:f7:b8:8f:17:f5:fb:a3:1e:49:45:98:31: f3:e5:84:b7:1a:09:1a:ef:e9:54:9f:55:3a:30:4c: 56:d1:e2:58:28:b8:75:e4:0d:cd:ed:e8:64:66:cf: 2a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7D:AE:28:EF:E0:70:51:29:FB:AC:28:99:2B:89:A3:D1:1A:E9:FA X509v3 Authority Key Identifier: keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:48:72:11:b1:6f:86:a2:de:fe:8f:f3:83:a7:45:e0:4e:4b: a2:ff:56:37:4d:e4:f4:c6:74:37:6d:06:7c:62:e4:7a:83:fd: 77:06:7a:1b:cc:d2:f2:43:a5:04:b4:17:a0:21:58:98:b9:90: fd:6e:c4:a1:c9:df:d0:9d:02:6e:90:cf:a0:1e:9c:12:32:69: 9d:94:5e:71:e8:ca:f8:73:47:e7:de:f8:19:e8:8e:ef:7f:95: 82:5e:6a:1d:04:27:c0:77:e1:0a:c2:81:3f:59:85:ee:0e:9d: 5a:05:d0:e6:a4:e4:1a:de:b3:67:ae:82:07:13:e3:9e:04:94: 7b:c2:42:30:f2:f8:83:e6:e7:82:e7:52:a8:e2:f0:07:bc:cb: 2a:ba:54:f4:29:f0:c7:26:8a:1d:d7:17:10:0d:96:75:83:b8: 7a:41:7c:43:68:2d:89:b2:2a:62:ee:7f:08:2d:14:d2:fe:16: 39:e2:65:6c:9d:8b:ef:83:86:b2:0b:74:4b:c8:a1:8e:47:a4: a4:f9:94:50:e5:0a:e6:0e:67:10:a9:d7:84:64:7c:bd:f5:c6: ca:4e:9c:13:50:b3:ae:c0:1a:b9:73:d0:ab:8e:14:af:be:5e: d4:10:b8:d8:a1:05:f2:ee:f9:72:e3:71:52:75:42:3e:2b:d7: 96:7d:cd:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE2QUMxMTAvBgNVBAUTKEZFNUYxQzc1MDA0OEJCNTRFMDEzNzNBQzNFREQ0Qjc3 N0Q4ODhFNzkwHhcNMjUxMjIyMjIxNzI4WhcNMjUxMjI5MjIxNzI4WjAYMRYwFAYD VQQDDA02OTQ5YzM3OS1lNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3xNaiRXJaxQiYEym/K5vzQep0ry8DM+33z0Rg4mYnpeVqhepHk3FwgMcs+c 4Z5E8qVHv3qIR2evtbGfJ+rYcqTPjBBYe+L0Jpk7KMwEic82QbWlYeDTnhe01DE3 /71YoirHIPTxtILQBSm1Hi7NCHfzo/GMeX48mGixthk92/2V9gOkcdGf4RcjW32P QmUZqQYPDkfqUN91D4CcpXC2dN773ALYkHylyvvzRWJ8JALuQyP0n9o41bPfY7Hm /k4v04nwxRcTX5+el1Kc0Qd1MmaQ0Cr3uI8X9fujHklFmDHz5YS3Ggka7+lUn1U6 MExW0eJYKLh15A3N7ehkZs8qYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAB9rijv 4HBRKfusKJkriaPRGun6MB8GA1UdIwQYMBaAFP5fHHUASLtU4BNzrD7dS3d9iI55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTZBQy8zOEQyMzcyMkY2 MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUxVGdFM09zUHQxTGQzMklq bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sOGNkUUJJdTFUZ0UzT3NQdDFMZDMySWpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTZBQy8zOEQyMzcyMkY2MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUx VGdFM09zUHQxTGQzMklqbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCSHIRsW+Got7+j/ODp0XgTkui/1Y3TeT0xnQ3bQZ8YuR6g/13Bnob zNLyQ6UEtBegIViYuZD9bsShyd/QnQJukM+gHpwSMmmdlF5x6Mr4c0fn3vgZ6I7v f5WCXmodBCfAd+EKwoE/WYXuDp1aBdDmpOQa3rNnroIHE+OeBJR7wkIw8viD5ueC 51Ko4vAHvMsqulT0KfDHJood1xcQDZZ1g7h6QXxDaC2Jsipi7n8ILRTS/hY54mVs nYvvg4ayC3RLyKGOR6Sk+ZRQ5QrmDmcQqdeEZHy99cbKTpwTULOuwBq5c9CrjhSv vl7UELjYoQXy7vly43FSdUI+K9eWfc1K -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:16 2025 by rpki-client